IBM C2150-609 問題集

質問 1：
The IBM Security Access Manager (ISAM) V9.0 deployment professional is attempting to strike the correct balance between ease of administration/configuration and security, and wants to limit where in the environment security policy can be changed.
On which ISAM component is the Secure Web Settings -> Policy Administration tool automatically disabled?
A. Master External Reference Entity
B. Runtime cluster Standby Policy Server node
C. Distributed Session Cache primary node
D. Runtime cluster restricted node
正解：D

質問 2：
A risk officer of an organization discovered that a site protected by the IBM Security Access Manager V9.0 solution might be vulnerable to common attacks like cross-site scripting (XSS) and SQL injection.
Which optional component should be configured to protect against these attacks?
A. Web Application Firewall
B. Advanced Access Control
C. Federation
D. Secure Web Settings
正解：A

質問 3：
A customer's IBM Security Access Manager V9.0 deployment consists of reverse proxy appliances situated in the DMZ and primary master and secondary master appliances situated in the internal corporate network.
Which port and direction of the network traffic flow is required to support cluster services between the appliances situated in the DMZ and the internal corporate network segment?
A. Port 22; Unidirectional
B. Port 2020: Bidirectional
C. Port 2020; Unidirectional
D. Port 22; Bidirectional
正解：D

質問 4：
The IBM Security Access Manager V9.0 deployment professional has recently discovered an entire deployment of over 100 junctions was performed incorrectly.
How can a repair operation be scripted for this, and future deployment personnel?
A. Use the REST API interface https://{appliance_hostname}/isam/pdadmin, JSON files and the CURL utility.
B. Use a text editor and create the correct junction XML files, then import them using the LMI.
C. Use the LMI Secure Web Settings -> Reverse Proxy -> Manage -> Junction Management interface.
D. Use the CLI SSH interface, navigating to isam->admin and authenticating as sec_master.
正解：B

質問 5：
An IBM Security Access Manager V9.0 deployment specialist is getting reports of failing requests. Analysis of a support file shows many connections to the backend server in TIME_WAIT state?
Where is the setting "sysctl.net.ipv4.tcp_tw_reuse = 1" added?
A. In the LMI "Manage System Settings -> System Settings -> Advanced Tuning Parameters" panel
B. In the [server] stanza of the reverse proxy instance conf file
C. In the [tcp] stanza of the reverse proxy instance conf file
D. In the LMI "Manage System Settings -> Network Settings -> Tuning" panel
正解：A

質問 6：
To configure IBM Security Access Manager V9.0 for Windows desktop single sign-on using Kerberos authentication, the Reverse Proxy's identity in the Active Directory Kerberos Domain must be associated with a Service Principal name (SPN).
Given the following information:
AD Kerberos Realm Name: company.com
ISAM Reverse Proxy DNS Domain: ws1xompany.com
What is the correct SPN?
A. HTTP/[email protected]
B. HTTP/wsl.company.com
C. HTTP/ws1 [email protected]
D. HTTP/[email protected]
正解：C

質問 7：
A deployment professional is developing a script using REST APIs to monitor the status of WebSEAL instances.
Which attribute and value indicates a WebSEAL instance is down?
A. Instance "status" with a value of "running"
B. Instance "health" with a value of "1"
C. Root junction (/) "status" with a value of "running"
D. Root junction (/) "health" with a value of "1"
正解：B

質問 8：
CORRECT TEXT
A customer has expressed the requirement that users accessing online banking application must first authenticate using a userid/password and successfully enter a one-time PIN which is texted to a cell phone.
Which two IBM Security Access Manager (ISAM) V9.0 modules are required to fully implement the solution? (Choose two.)
A. ISAM Cloud Module
B. ISAM Federation Module
C. ISAM Advanced Control Module
D. ISAM PAM Module
E. ISAM Access Manager Platform
正解：C,E